larry w. cashdollar vulnerabilities and exploits

(subscribe to this query)

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager.

Sun Solaris

3 EDB exploits

7.5

CVSSv3

Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path.

Drupal Avatar Uploader 7.x-1.0

1 EDB exploit

9.8

CVSSv3

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6

Huge-it Portfolio Gallery 1.0.6

1 EDB exploit

9.8

CVSSv3

Unauthenticated SQL Injection in Huge-IT Catalog v1.0.7 for Joomla

Huge-it Huge-it Catalog 1.0.7

1 EDB exploit

7.2

CVSSv3

There is blind SQL injection in WordPress Arigato Autoresponder and Newsletter v2.5.1.8 These vulnerabilities require administrative privileges to exploit. There is an exploitable blind SQL injection vulnerability via the del_ids variable by POST request.

Kibokolabs Arigato Autoresponder And Newsletter 2.5.1.8

1 EDB exploit

4.8

CVSSv3

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit.

Kibokolabs Arigato Autoresponder And Newsletter 2.5.1.8

1 EDB exploit

4.8

CVSSv3

These vulnerabilities require administrative privileges to exploit. There is an XSS vulnerability in bft_list.html.php:43: via the filter_signup_date parameter.

Kibokolabs Arigato Autoresponder And Newsletter

1 EDB exploit

4.8

CVSSv3

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in integration-contact-form.html.php:15: via POST request variable html_id.

Kibokolabs Arigato Autoresponder And Newsletter 2.5.1.8

1 EDB exploit

4.8

CVSSv3

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in list-user.html.php:4: via GET request offset variable.

Kibokolabs Arigato Autoresponder And Newsletter 2.5.1.8

1 EDB exploit

4.8

CVSSv3

There is a reflected XSS vulnerability in WordPress Arigato Autoresponder and News letter v2.5.1.8 This vulnerability requires administrative privileges to exploit. There is an XSS vulnerability in unsubscribe.html.php:3: via GET reuqest to the email variable.

Kibokolabs Arigato Autoresponder And Newsletter 2.5.1.8

1 EDB exploit

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

larry w. cashdollar vulnerabilities and exploits

Vulmon Search

About

Products

Connect